Lucene search

K
cve[email protected]CVE-2007-0020
HistoryJan 24, 2007 - 1:28 a.m.

CVE-2007-0020

2007-01-2401:28:00
NVD-CWE-Other
web.nvd.nist.gov
25
cve-2007-0020
panic transmit
sftp
buffer overflow
remote code execution
url
security vulnerability

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.233 Low

EPSS

Percentile

96.5%

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL.

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.233 Low

EPSS

Percentile

96.5%

Related for CVE-2007-0020